What’s Vulnerable › Vulnerabilities

CVE-2013-7468

• Severity: high (CVSS 8.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-03-07 · updated 2026-06-17
• Weakness: CWE-94

Description

Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.

Affected products

• SimpleMachines Simple Machines Forum: 2.0.4

References

• https://packetstormsecurity.com/files/121391/public_phpInjection-smf204.txt
• https://packetstormsecurity.com/files/121391/public_phpInjection-smf204.txt

Get alerted when CVE-2013-7468 or the next vulnerability affects your stack